ticket: simplify ticket identity fields

2026-06-09 11:57:15 +09:00
parent 48efcc7dfb
commit 191a875f5a
747 changed files with 1311 additions and 2600 deletions
@@ -0,0 +1,15 @@
+# Decision: separate internal feature modules from external-plugin authority
+
+Internal modules extracted from Pod implementation files should not be treated as if they require the external-plugin permission model.
+
+For an internal built-in module such as Task tools:
+
+- the feature registry is an API/registration boundary;
+- descriptor-declared contributions are reconciled at install time;
+- normal ToolRegistry and PreToolCall permission behavior remains authoritative;
+- host state such as `TaskStore` can be passed by the Pod host constructor;
+- requested host authorities should normally be empty.
+
+The external-plugin authority model remains necessary for sandbox/object-capability grants when plugin code receives dangerous host APIs such as filesystem, network, secrets, model-visible durable notification/history append, Pod-management façade, persistent state, or authority-bearing service access.
+
+This split should be implemented separately from the Task tools extraction. The Task tools extraction should validate the contribution-only built-in module path without solving external plugin approval.